Aevral
ChatGPT pluginAI security review for PRs
- Featured
- No
not on the featured shelf
Movement
From our daily snapshots over the last 30 days.
Rank by placement
Not enough data points to chart.
Rank in Developer tools
Not enough data points to chart.
In its category
How this plugin compares with others in the same category. Positions are counted within the category, not across the whole directory.
Developer tools608th of 638 by placement
| # | Plugin | Position | 7d |
|---|---|---|---|
| 606 | #6974 | — | |
| 607 | #6977 | — | |
| 608 | #6978 | — | |
| 609 | #6979 | — | |
| 610 | #6980 | — |
Aevral is an AI security reviewer for GitHub pull requests. Each review looks for access control, business logic, injection, XSS, SSRF, path traversal, unsafe deserialization, token and session flaws, and LLM-integration risks, and posts each finding with a suggested fix you apply. This plugin is a setup skill: it walks you through installing the Aevral GitHub App so reviews run server-side. It does not review code on your machine. After the App is installed, the next pull request can already be reviewed, including before anyone signs in to the console. Reviews are advisory and never block a merge. The optional whole-repo scan reads authorization, IDOR, and business-logic access control only; it is not secret, dependency, or memory-corruption scanning, and not a general SAST. GitHub only. By Better ISMS.
Example prompts
- “Set up Aevral security review on this repository.”
- “Install the Aevral GitHub App and get pull request security reviews.”
- “Start an Aevral scan of this repository and report the status.”
Skills
review
Set up the Aevral GitHub App so pull requests get a security review for authorization, IDOR, and business-logic flaws. Use when the user asks to install Aevral, connect Aevral reviews, or set up Aevral on this repository, or asks to start or check an Aevral scan (whole-repo scan through the Aevral API with AEVRAL_API_KEY). Do not use for a generic review of the current diff.
- Categories
- Made by
- Better ISMS · Website
- Sign-in
- On Install
- Capabilities
- Security review, Pull request setup, Whole-repo scan
- Availability
- Available
- Version
- 0.2.3
- Keywords
- aevral, security, code-review, pull-request, authorization, idor, github-app
- Created
- October 1, 2026
- More info
- Sponsorship
- Promote this plugin